Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

GIMP — Vulnerabilities & Security Advisories 35

All 35 CVE vulnerabilities found in GIMP, with AI-generated Chinese analysis, references, and POCs.

This page documents known security vulnerabilities in GIMP, the GNU Image Manipulation Program, specifically focusing on common weakness enumeration tags associated with the software. It aggregates a comprehensive list of security flaws, including buffer overflows, memory corruption issues, and input validation errors that have been identified within the application's codebase. The data covers vulnerability disclosures from the software's inception through recent updates, ensuring a historical perspective on security incidents affecting the platform. By consulting this resource, users and security researchers can effectively track vendor advisories issued by the GIMP community and official repositories to stay informed about critical patches. You can also gain a deeper understanding of specific weakness classes that frequently impact open-source image processing tools, helping to contextualize the nature of these risks. Additionally, the page serves as a reference for looking up the complete vulnerability history of the product, allowing for better risk assessment and informed decision-making when deploying GIMP in various environments. This compilation supports proactive security maintenance by providing clear insights into past flaws and their resolutions. The information is organized to facilitate easy navigation, ensuring that both novice users and expert developers can quickly identify relevant security issues. This transparency is essential for maintaining the integrity and safety of the software ecosystem surrounding GIMP.

Vendor: GIMP

CVE IDTitleCVSSSeverityPublished
CVE-2026-66759 Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images CWE-125 7.1 High2026-07-27
CVE-2026-66758 Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images CWE-190 7.8 High2026-07-27
CVE-2026-66757 Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images CWE-190 5.5 Medium2026-07-27
CVE-2026-2050 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122--2026-06-24
CVE-2026-2049 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122--2026-06-10
CVE-2026-4154 GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2026-04-11
CVE-2026-4153 GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-04-11
CVE-2026-4152 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-04-11
CVE-2026-4151 GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2026-04-11
CVE-2026-4150 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2026-04-11
CVE-2026-2048 GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2026-02-20
CVE-2026-2047 GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-02-20
CVE-2026-2045 GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2026-02-20
CVE-2026-2044 GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability CWE-908 7.8AIHighAI2026-02-20
CVE-2026-0797 GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-02-20
CVE-2025-15059 GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8 -2026-01-23
CVE-2025-14425 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-12-23
CVE-2025-14424 GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability CWE-416 7.8AIHighAI2025-12-23
CVE-2025-14423 GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 7.8AIHighAI2025-12-23
CVE-2025-14422 GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-12-23
CVE-2025-10934 GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-10-29
CVE-2025-10925 GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 7.8AIHighAI2025-10-29
CVE-2025-10924 GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-10-29
CVE-2025-10923 GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-10-29
CVE-2025-10922 GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-10-29
CVE-2025-10921 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-10-29
CVE-2025-10920 GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2025-10-29
CVE-2025-8672 TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app CWE-276 6.6AIMediumAI2025-08-11
CVE-2025-5473 GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-06-06
CVE-2025-2761 GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8 -2025-04-23

All 35 known CVE vulnerabilities affecting GIMP with full Chinese analysis, references, and POCs where available.